Your submission was sent successfully! Close

CVE-2016-2194

Published: 13 May 2016

The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (infinite loop) via unspecified input to the OS2ECP function, related to a composite modulus.

Priority

Medium

CVSS 3 base score: 7.5

Status

Package Release Status
botan1.10
Launchpad, Ubuntu, Debian
Upstream
Released (1.10.12-1)
Ubuntu 16.04 ESM (Xenial Xerus) Not vulnerable
(1.10.12-1)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was released [1.10.5-1+deb7u1ubuntu0.14.04.1])